A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Security and Administration with Windows XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

Wallpaper got changed automatically to manager's photo



 
 
Thread Tools Display Modes
  #1  
Old March 5th 10, 09:41 PM posted to microsoft.public.windowsxp.security_admin
Newbie[_2_]
external usenet poster
 
Posts: 3
Default Wallpaper got changed automatically to manager's photo

We just had a few computers where the wallpaper background got changed to
manager's picture all of a sudden? Checked the task manager and it got a
scheduled task called "AT1", details as below:

RUN: C:\Windows\wc.exe C:\Windows\icon.jpg 0

Comments: Created by NetScheduleJobAdd

Is there any way I can trace who created the job? The mystery is how does
the system know how to retrieve manager's photo?

Thanks for your help.

Ads
  #2  
Old March 6th 10, 01:55 AM posted to microsoft.public.windowsxp.security_admin
Nil[_2_]
external usenet poster
 
Posts: 2,170
Default Wallpaper got changed automatically to manager's photo

On 05 Mar 2010, "Newbie" wrote in
microsoft.public.windowsxp.security_admin:

We just had a few computers where the wallpaper background got
changed to manager's picture all of a sudden? Checked the task
manager and it got a scheduled task called "AT1", details as
below:

RUN: C:\Windows\wc.exe C:\Windows\icon.jpg 0

Comments: Created by NetScheduleJobAdd

Is there any way I can trace who created the job? The mystery is
how does the system know how to retrieve manager's photo?


Probably not. You might be able to tell when it was done by looking at
the file dates for wc.exe and icon.jpg. I'm sure you will find that
"icon.jog" is the picture of the manager. Either the picture was placed
in the Windows directory by the practical joker, or the wallpaper
changer program can be told where to retrieve it from on the network.
If you can find its options, that might provide another clue.
 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 04:55 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.